18047 matches found
CVE-2023-20016
CVE-2023-20016 affects Cisco UCS Manager Software and Cisco FXOS Software backups/export files. The root issue is a weakness in the backup encryption method using a static key, which could let an unauthenticated attacker with access to a backup decrypt sensitive data stored in full state and conf...
Error When Adding Veeam Backup for Microsoft 365 to Veeam ONE
Challenge When attempting to add Veeam Backup for Microsoft 365 to Veeam ONE, either of the following error occurs: Failed to connect to "localhost".404 Not Found Failed to add the Veeam Backup for Microsoft 365 server. The server version is not supported. Cause Both errors occur for the same...
Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...
Debian: Security Advisory (DLA-3330-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Task fails with "Repository is not compatible with Catalyst Store with fixed block setting enabled"
Challenge A Veeam Backup & Replication job targeting a StoreOnce Repository backed by a Catalyst Store that has Fixed Block Chunking enabled fails with either of the following errors: Repository is not compatible with Catalyst Store with fixed block setting enabled Error:...
Release Information for Veeam Backup for Salesforce 1 Cumulative Patches
This update has been superseded by Veeam Backup for Salesforce 2. Requirements Please confirm that you are running Veeam Backup for Salesforce 1 build 1.0.0.1429 or later before upgrading. You can find the currently installed build number in the Configuration About section. After the upgrade, the...
K25607522: BIG-IP vulnerability CVE-2019-6688
Security Advisory Description A user can obtain the secret used to encrypt a BIG-IP UCS backup file while sending an SNMP query to the BIG-IP or BIG-IQ system; however, the user cannot access the UCS files. CVE-2019-6688 Impact BIG-IP and BIG-IQ The SNMP user can obtain the secret used to encrypt...
GoAnywhere zero-day opened door to Clop ransomware
A semi-active ransomware group has claimed it is behind a string of attacks which have taken advantage of a zero-day vulnerability in GoAywhere MFT. The Russian-linked Clop ransomware group says it was able to remotely attack private systems using exposed GoAnywhere MFT administration consoles...
Moodle 4.0.x < 4.0.4 Multiple Vulnerabilities
The version of Moodle installed on the remote host is 3.9.x prior to 3.9.17, 3.11.x prior to 3.11.10 or 4.0.x prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities: - A stored Cross-Site Scripting XSS and page Denial of Service DoS vulnerabilities due to recursive rendering in...
Release Information for Veeam Backup & Replication 12 Day 0 Update
Update Applicability This "Day 0" update for Veeam Backup & Replication 12 is strictly intended for servers using the RTM release build 12.0.0.14 02. If Veeam Backup & Replication 12 GA build 12.0.0.14 20 is installed, this update can be ignored as it is not needed. All resolved issues listed in...
CVE-2022-33871
A stack-based buffer overflow vulnerability CWE-121 in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI execute backup-local rename and execute backup-local show...
CVE-2022-33871
A stack-based buffer overflow vulnerability CWE-121 in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI execute backup-local rename and execute backup-local show...
Stack overflow
A stack-based buffer overflow vulnerability CWE-121 in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI execute backup-local rename and execute backup-local show...
CVE-2022-33871
A stack-based buffer overflow vulnerability CWE-121 in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI execute backup-local rename and execute backup-local show...
PT-2023-13318 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.1 and earlier FortiWeb version 6.4 and all versions FortiWeb version 6.3.19 and earlier Description: A stack-based buffer overflow issue may allow a privileged attacker to execute arbitrary code or commands via...
PT-2023-1535 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.1 and below FortiWeb version 6.4 all versions FortiWeb version 6.3.18 and below Description: The issue is related to an improper neutralization of special elements used in an OS command, which may allow a privileged...
FortiWeb - Command injection in CLI backup functionality
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiWeb may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters...
CVE-2022-33871: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability CWE-121 in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI execute backup-local rename and execute backup-local show...
SUSE CVE-2005-1920
The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...